Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Ensure storage permission revoke happens for all users

Browse Source 
When revoking storage permissions due to storage escalation, ensure the
revoke happens for all users

Fixes: 186034260
Bug: 171430330
Test: atest --user-type secondary_user StorageEscalationTest
Merged-In: Ieb8bb9cde1576e9eee131338d393b8a3528341ec
Change-Id: Ieb8bb9cde1576e9eee131338d393b8a3528341ec
This commit is contained in:
Nate Myren
2021-04-29 11:10:12 -07:00
parent 08db350c8b
commit 387182eb49
1 changed files with 23 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
services/core/java/com/android/server/pm/permission/PermissionManagerService.java
View File

@@ -618,7 +618,8 @@ public class PermissionManagerService {
} }
final int callingUid = Binder.getCallingUid(); final int callingUid = Binder.getCallingUid();
final int userId = UserHandle.getUserId(newPackage.applicationInfo.uid);
for (int userId: mUserManagerInt.getUserIds()) {
int numRequestedPermissions = newPackage.requestedPermissions.size(); int numRequestedPermissions = newPackage.requestedPermissions.size();
for (int i = 0; i < numRequestedPermissions; i++) { for (int i = 0; i < numRequestedPermissions; i++) {
PermissionInfo permInfo = getPermissionInfo(newPackage.requestedPermissions.get(i), PermissionInfo permInfo = getPermissionInfo(newPackage.requestedPermissions.get(i),
@@ -633,8 +634,14 @@ public class PermissionManagerService {
+ downgradedSdk + " or newly requested legacy full storage " + downgradedSdk + " or newly requested legacy full storage "
+ newlyRequestsLegacy); + newlyRequestsLegacy);
try {
revokeRuntimePermission(permInfo.name, newPackage.packageName, revokeRuntimePermission(permInfo.name, newPackage.packageName,
false, userId, permissionCallback); false, userId, permissionCallback);
} catch (IllegalStateException | SecurityException e) {
Log.e(TAG, "unable to revoke " + permInfo.name + " for "
+ newPackage.packageName + " user " + userId, e);
}
}
} }
} }